IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with strik e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please CANCEL claims 17 and 24; AMEND claims 18-22, 25-29 and 31 and ADD new 
claim 32 in accordance with the following: 

1-17 (CANCELLED) 

18. (CURRENTLY AMENDED) The method as claimed in claims 22, wherein the 
control flow description is a control flow graph. 

19. (CURRENTLY AMENDED) The method as claimed in claims 22, wherein the data 
flow description is a data flow graph. 

20. (CURRENTLY AMENDED) The method as claimed in claim47^2, 

wherein each of the fault description s associated with the reference elements is a stor e d 
fault tree, wh e r ei n th e e l e m e nt fau l t d e scr i pt i on i s asc e rtain e d as an ele m e nt fau l t tr ee , and 

wherein the overall fault description is ascertained as an-the overall fault tree based on 
fault trees associated with the corresponding reference element for each selected program 
element . 

21. (CURRENTLY AMENDED) The method as claimed in claim^7_22, further 
comprising performing fault analysis in the section of the computer program using the overall 
fault description. 

22. (CURRENTLY AMENDED) Tfre-A method as c l o i mod i n cla i m 17 for using a 
computer to ascertain an overall fault description for at least one section of a computer program , 
comprising: 

storing fault descriptions associated with reference elements to describe possible faults 
in the reference elements, respectively: 

storing a section of the computer program; 



4 



ascertaining a control flow description for the section of the computer program, to 
describe a flow of control information in the section of the computer program; 

ascertaining a data flow description for the section of the computer program, to describe 
a flow of data in the section of the computer program; 

combining the control and data flow descriptions into a joint flow description for the 
section of the computer program: 

selecting program elements from the section of the computer program; 

matching each selected program element with a corresponding reference element to 
obtain a fault description associated with the corresponding reference element and thereby 
describe possible faults in the selected program element; 

ascertaining wh e r ei n the overall fault description i s asc e rta i n e d as an overall fault tree 
using the fault descriptions of the program elements from the computer program , with a structure 
of the overall fault description taking into account a structure of the joint flow description; and 
wh e r ei n sa i d m e thod furth e r compr i s e s 

altering the overall fault tree in terms of prescribable boundary conditions. 

23. (PREVIOUSLY PRESENTED) The method as claimed in claim 22, wherein said 
altering comprises adding a complementary fault tree. 

24. (CANCELLED) 

25. (CURRENTLY AMENDED) The method as claimed in claim-34 29, wherein said 
processor ascertains the control flow description as a control flow graph. 

26. (CURRENTLY AMENDED) The system as claimed in claim-24 29, wherein said 
processor ascertains the data flow description as a data flow graph. 

27. (CURRENTLY AMENDED) The system as claimed in claim-24 29, 
wherein said storage unit stores each fault description as a fault tree, and 

wherein said processor ascertains each element fault description as an element fault tree 
and the overall fault description as an overall fault tree. 
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28. (CURRENTLY AMENDED) The system as claimed in claim-24 29, wherein said 
processor further performs fault analysis in the at least one section of the computer program 
using the overall fault description. 

29. (CURRENTLY AMENDED) The-A system as c l a i m e d i n cla i m 2 4 for ascertaining an 
overall fault description for at least one section of a computer program , comprising: 

a storage unit to store the at least one section of the computer program and fault 
descriptions for reference elements, each fault description describing possible faults in one of 
the reference elements; and 

a processor coupled to said storage unit, 

to ascertain control and data flow descriptions for the at least one section of the 
computer program, the control flow description describing a flow of control information in the at 
least one section of the computer program and the data flow description describing a flow of 
data in the at least one section of the computer program, 

to combine the control and data flow descriptions into a joint flow description for 
the at least one section of the computer program, 

to select program elements from the at least one section of the computer 

program, 

to match each selected program element with a corresponding reference element and 
obtain a fault description associated with the corresponding reference element and thereby describe 
possible faults in the selected program element;; and 

to ascertain wh e r ei n sa i d proc e ssor asc e rta i ns the overall fault description as an 
overall fault tree using the fault descriptions of the program elements from the computer 
program, with a structure of the overall fault description taking into account a structure of the 
joint flow description; and a l t e rs 

to alter the overall fault tree in terms of prescribable boundary conditions. 

30. (PREVIOUSLY PRESENTED) The system as claimed in claim 29, wherein said 
processor alters the overall fault tree by adding a complementary fault tree. 

31. (PREVIOUSLY PRESENTED) A computer-readable storage medium storing at least 
one program to control a computer to perform a method for ascertaining an overall fault 
description for at least one section of a computer program, said method comprising: 

storing a section of the computer program; 
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ascertaining a control flow description for the section of the computer program, to 
describe a flow of control information in the section of the computer program; 

ascertaining a data flow description for the section of the computer program, to describe 
a flow of data in the section of the computer program; 

combining the control and data flow descriptions into a joint flow description for the 
section of the computer program; 

selecting program elements from the section of the computer program; 

storing a fault description for each reference element to describe possible faults in the 
reference element; 

asc e rtaining an ele m e nt fau l t d e script i on for matching each selected program element T 
bas e d on th e fau l t d e script i on assoc i at e d with a corresponding reference element^,]] to obtain a 
fault description associated with the corresponding reference element and thereby describe 
possible faults in the selected program element; a«4 

ascertaining the overall fault description as an overall fault tree using the e l e m e nt fault 
descriptions of the program elements from the computer program , with a structure of the overall 
fault description taking into account a structure of the joint flow description ; and 

altering the overall fault tree in terms of prescribable boundary conditions . 

32. (NEW) A computer-readable storage medium as claimed in claim 31 , wherein said 
processor alters the overall fault tree by adding a complementary fault tree. 
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